Evidence record / omnigent
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-omnigent-repository-scoped-git-ssh-brokering-is-on-main-only-at-window-close
Repository-scoped Git SSH brokering is on main only at window close. The new sandbox.git_ssh grant keeps an SSH key in the trusted parent, which validates the host, repository and fetch/push operation. The sandbox receives a transport helper and scoped Unix socket, rather than direct key access or arbitrary SSH. Linux bubblewrap and macOS Seatbelt helper/terminal paths are supported; other backends reject the setting. It landed later on October 13 and is not in stable 0.18.0 or that day’s nightly.
Channel: main-unreleased. Half: capability. Date: 2026-10-13T16:27:42Z merged.
Operator consequence: Track the first containing release before relying on this grant in a stable fleet. It could replace handing an agent a deploy key or general SSH access. Review exact repo/operation grants and keep key and known-host files outside sandbox paths; no claim of measured security or reliability follows from static source review.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-omnigent-repository-scoped-git-ssh-brokering-is-on-main-only-at-window-close
Profile citations
- omnigent / claim / git-ssh-main-only
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-omnigent-repository-scoped-git-ssh-brokering-is-on-main-only-at-window-closegithub.com/omnigent-ai/omnigent/commit/6cf6acf2fde6b80ec929e0b1565ec5e50e6f7306tagged commit file2026-10-13-omnigent-repository-scoped-git-ssh-brokering-is-on-main-only-at-window-closeomnigent-ai/omnigent / docs/AGENT_YAML_SPEC.md#L517-L561
Versioned source: run artifact